Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: 42QJv91l+0h+IgVW1FFzhMBcN7wHdcLyrRsCVeH0b2s=
Subject key identifier: A5:91:43:5C:27:D9:53:48:75:44:BA:9B:9B:B0:9B:99:7A:6B:29:C2
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019D38D297C0E5B27E8231E1BCFB53414D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 06D8
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: gPJ9YpNJmbclmpLf0myOfSFuPRUEgIUBDfWoOdzBA8o=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:97:c0:e5:b2:7e:82:31:e1:bc:fb:53:41:4d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=a591435c27d953487544ba9b9bb09b997a6b29c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:5b:b9:62:c6:cc:15:71:69:f3:b7:18:c0:
d1:2a:32:aa:e0:30:0c:2c:c1:38:25:53:7d:01:67:
66:1d:67:4e:3e:c3:26:30:05:d9:d1:62:ce:03:03:
1b:aa:65:fc:bd:e2:cb:54:8d:4e:87:3a:a6:04:0c:
f9:52:64:ce:0f:f2:43:68:19:04:c2:e1:1d:c9:eb:
e0:cb:0a:e5:2e:25:6c:72:1b:39:fb:f7:72:9b:9e:
a0:99:0c:11:10:3a:63:f8:ab:47:2e:28:8c:52:39:
64:cf:b8:fe:3e:fa:70:93:90:bf:c1:ef:e7:14:df:
86:ac:ae:66:28:1e:1f:a9:f3:05:7b:0a:e0:aa:ca:
6b:50:dd:d9:1d:86:c7:d7:cc:89:f8:08:fe:ef:1d:
3b:96:c8:18:4c:02:10:d5:e7:5e:07:4d:68:b5:fc:
6b:77:41:4e:ec:28:f2:6d:49:73:d5:06:60:a6:9b:
28:75:de:bb:67:99:6e:7e:4c:96:c7:b6:4e:14:37:
ba:07:fe:0d:61:71:e2:4b:83:94:43:6e:f1:d7:15:
71:bd:14:e1:19:8f:81:af:7e:52:57:2c:df:3f:2c:
c3:c9:22:f2:e3:a2:b1:99:e3:cd:1f:1a:ec:c0:69:
5e:c1:b1:bf:6d:db:e6:c7:24:b0:36:50:78:18:91:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:43:5C:27:D9:53:48:75:44:BA:9B:9B:B0:9B:99:7A:6B:29:C2
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a5:cd:49:50:81:49:a8:03:07:af:f5:14:ca:c1:e2:58:db:
54:4b:56:77:c5:6f:d5:74:a1:74:8e:fd:30:ce:08:19:27:aa:
23:4c:ae:51:87:61:a0:03:4a:52:0c:f1:5f:8d:f5:6e:4f:48:
f5:10:98:88:5b:1e:5b:1b:be:35:72:24:22:ef:c6:58:4a:d1:
e2:c8:8b:f1:57:4a:45:db:1f:ea:5f:38:55:dc:f2:96:3d:7f:
c4:be:02:e8:f6:1a:a5:da:2a:b5:4f:f8:07:2b:51:85:5b:ee:
6c:02:e6:b1:2e:24:af:b4:6b:aa:08:cf:98:60:6f:07:f7:53:
68:6a:24:60:18:35:3d:25:5e:58:02:ba:b9:d7:00:3b:2d:99:
3c:d9:30:17:6f:70:eb:e4:63:0f:bf:17:6a:37:12:95:9a:f7:
37:50:ec:86:e5:f2:59:b0:ea:06:6a:da:58:fe:02:08:b6:08:
95:69:9c:68:72:48:00:55:eb:4a:f8:2d:6b:ef:2a:0a:11:e1:
f8:c5:cd:e0:2c:a2:28:e7:03:0f:67:eb:57:a8:92:c4:b7:4a:
a5:8f:0f:8e:a6:9e:b6:ca:ca:77:fe:8e:a4:b3:46:1b:a9:a0:
01:bf:ec:04:44:32:43:0d:72:29:56:0f:2f:78:22:17:66:ca:
fc:a6:ca:71
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ040pfA5bJ+gjHhvPtTQU0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy
MzFmZjIwHhcNMjYwMzI5MDkwMDE4WhcNMjYwMzMwMDkwMDE4WjAzMTEwLwYDVQQD
EyhhNTkxNDM1YzI3ZDk1MzQ4NzU0NGJhOWI5YmIwOWI5OTdhNmIyOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu55buWLGzBVxafO3GMDRKjKq4DAM
LME4JVN9AWdmHWdOPsMmMAXZ0WLOAwMbqmX8veLLVI1OhzqmBAz5UmTOD/JDaBkE
wuEdyevgywrlLiVschs5+/dym56gmQwREDpj+KtHLiiMUjlkz7j+Pvpwk5C/we/n
FN+GrK5mKB4fqfMFewrgqsprUN3ZHYbH18yJ+Aj+7x07lsgYTAIQ1edeB01otfxr
d0FO7CjybUlz1QZgppsodd67Z5lufkyWx7ZOFDe6B/4NYXHiS4OUQ27x1xVxvRTh
GY+Br35SVyzfPyzDySLy46KxmePNHxrswGlewbG/bdvmxySwNlB4GJHsvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKWRQ1wn2VNIdUS6m5uwm5l6aynCMB8GA1UdIwQY
MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4
LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1
NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6XN
SVCBSagDB6/1FMrB4ljbVEtWd8Vv1XShdI79MM4IGSeqI0yuUYdhoANKUgzxX431
bk9I9RCYiFseWxu+NXIkIu/GWErR4siL8VdKRdsf6l84Vdzylj1/xL4C6PYapdoq
tU/4BytRhVvubALmsS4kr7RrqgjPmGBvB/dTaGokYBg1PSVeWAK6udcAOy2ZPNkw
F29w6+RjD78XajcSlZr3N1DshuXyWbDqBmraWP4CCLYIlWmcaHJIAFXrSvgta+8q
ChHh+MXN4CyiKOcDD2frV6iSxLdKpY8PjqaetsrKd/6OpLNGG6mgAb/sBEQyQw1y
KVYPL3giF2bK/KbKcQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:11 2026 by rpki-client